nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Problem setup Portal for ArcGIS with Integrated Windows Authentication

AnthonyChong

Hi,

i have been trying to setup Integrated Windows Authentication for my Portal for ArcGIS without success. Here's my configuration:

- Windows 2008 Server R2, IIS 7
- Portal for ArcGIS 10.2, unfederated, Web Adapter (IIS), default built-in users authentication

I followed the steps in the online resource:

http://resources.arcgis.com/en/help/main/10.2/index.html#/Using_Integrated_Windows_Authentication_with_your_portal/017s00000066000000/

When i login using the initial admin account via https://portal.domain.com:7443/arcgis/home, i didn't see any AD users being populated in the user list - instead i still see the same default built-in users.

Are there any logs i can check if my connection to AD is established?
Are there any settings to look out for that are not mentioned in the resources?

Thanks!

Finde mehr Beiträge mit dem Tag

Accepted answers

All comments

TonyGegner

AD users will be listed after the first time they visit the site with SSO.

It doesnt populate every user in the AD automaticly.

AnthonyChong

hi,

Just to clarify on the step for Designating a Windows account as an administrator (step 3 in particular):

Steps:
1.Open a browser and connect to your portal through port 7443, for example, https://portal.domain.com:7443/arcgis/home.
2.Sign in using the initial administrator account you created when you set up Portal for ArcGIS.
3.Find the Windows account you will use to administer your portal and change the role to Administrator. The account will appear in the format username@domain.
4.Sign out of the website.

Do you mean that i have try to login as a AD account first before i can see my AD account using my initial admin account?

Thanks!

-Anthony

TonyGegner

Hi,
First you create your initial portal admin account.

Then connect to the site (https://portal.domain.com/arcgis/home) through the webadaptor with SSO.
You should be logged in automaticly with your current domain user if everything is set up correctly.

Then connect to https://portal.domain.com:7443/arcgis/home and logon as the initial portal admin account.
Now you should se your AD-user in the list and you can change account type to admin.

AnthonyChong

Thanks for the reply.

When i access https://portal.domain.com/arcgis/home, I was prompted to login to my domain. I keyed in my domain id and password and click ok. It still shows me the unauthenticated home page (with the "Sign In" link on the top right). Can I say that my web adaptor (IIS) setup is not correct? I followed the steps on the resources, what else did i miss out? My Web Adaptor is not shared.

Configuring the ArcGIS Web Adaptor to use Windows authentication:
1.Start IIS Manager.
2.Access the ArcGIS Web Adaptor website in the Connections panel.

Expand <your server> > Sites > Default Web Site and click on your Web Adaptor. If you used the default name, the site is named arcgis.

3.Double-click Authentication in the Home panel.
4.Click Anonymous Authentication and click Disable.
5.Click Windows Authentication and click Enable.
6.Close IIS Manager.

Thanks!

-anthony

TonyGegner

Hi,
Yes thats correct.

Have you also added the AD-configuration to the configuration file?: C:\Program Files\ArcGIS\Portal\etc\portal-config.properties
idp.type=WINDOWS
idp.ad.user=domain\\domain_user
idp.ad.userpassword=domainuser_password
idp.ad.user.fullnameattribute=cn
idp.ad.user.emailattribute=mail
idp.userpassword.encrypted=false

You can also check the log and see if you find something interesting
C:\arcgisportal\logs\webserver\catalina.<date>.log:
C:\arcgisportal\logs\webserver\localhost.<date>.log

AnthonyChong

Yes. i have configured that and restarted the portal service. I went thru the link several times and quite sure i didn't miss out anything.

http://resources.arcgis.com/en/help/...0000066000000/

I also check the 2 logs you mentioned, nothing seem to indicate any authentication errors.

Not sure what else i have missed out.

Any pointers would be greatly appreciated.

Thanks.

-anthony

TonyGegner

You restarted the portal service after changing authentication mode?

AnthonyChong

Yes. I did.

AtsuhitoNAKANO

I have also the same problem...

If it is true that we can integrate Portal with AD, please show us your success sample.

JacobBoyle

I've successfully enabled AD authentication on my portal. This was one of the few steps I had little issue with throughout the setup process.

make sure you are clearing your local cache in your browser as well as restarting the portal server. I had an issue when even after being prompted to enter my user name and password, it was still loading the cached page and acted like I wasn't signed in.

AtsuhitoNAKANO

I tried to clear cache and restart my portal.

But I can't.

I would like to see the successful example.

JacobBoyle

I unfortunately can not share our portal, it's a private business, and security is of the utmost importance in our industry.

I would recommend contacting Esri Technical support if you have been unable to solve this on your own. Sometimes it can be the simplest of things causing your problem, and the fresh set of eyes is always helpful.

RaviNarayanan

Anthony,

Please contact ESRI Tech Support if this continues to be an issue.

One question in the mean time....after updating the AD properties in C:\Program Files\ArcGIS\Portal\etc\portal-config.properties and restarting portal, do you see the encrypted password? this would indicate that that portal was able to connect to the AD store using the connection information provided.

idp.type=WINDOWS
idp.ad.user=domain\\domain_user
idp.ad.userpassword=domainuser_password
idp.ad.user.fullnameattribute=cn
idp.ad.user.emailattribute=mail
idp.userpassword.encrypted=false

Please post a sample (fake values) of the properties that were set in this file...so we can see if it looks ok.

WilliamCraft

I know this may be a silly question, but have you made sure that your LDAP section in the properties file is NOT commented out and that the built-in section IS commented out before restarting the service? If you've modified the domain user account password (either at the domain level or within the properties file itself), please reset the encrypted value to 'false' before restarting the service. It will be automatically changed to 'true' and the password encrypted once the service starts back up.

Gregory_L___Greg_Gunther

Has anyone found a solution to this for Portal 10.2? I am having the same issue.

MichalGrinvald1

Hi,

I get the same probkem in Portal for ArcGIS 10.3

What ever I do (with the same or a different web Adaptor for the Portal), when I try to connect with my AD account, I get the message:

"Unable to sign you in to Portal for ArcGIS".

I followed all the instructions and repeated the process 3 times and still can't enter with my AD account or any other AD account.

Thanks a lot,

Miri

Nimm an der Diskussion teil

Angemeldete Mitglieder können Beiträge verfassen, Updates folgen und mehr. Neu hier? Registriere ein kostenloses Konto.

Schnellzugriffe

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.